Availability and Resilience. Data on Xxxxxxxxxx.Xxx server systems is backed up incrementally at least daily and "fully" weekly. The backup media are encrypted and moved to a physically separate location. The import of backups is tested regularly. The IT systems have an uninterruptible power supply. The server room has a fire alarm system and a CO2 extinguishing system. All server systems are subject to monitoring, which immediately triggers messages to an administrator in the event of malfunctions. There is a contingency plan in place at Xxxxxxxxxx.Xxx, which includes a restart plan.
Availability and Resilience. 1. Availability control The Processor procures that the technical infrastructure provides high availability and reliability. With regard to this, the Processor takes the following measures for protecting Personal Data against accidental destruction or loss: • Interruption-free power supplies avoid unplanned system crash in the event of short-term power failures. In addition, emergency generators are used to take over the power supply in the case of longer power failures. • High-speed and robust optic fiber networks connect data centers with other large hubs and Internet users. • In addition, high availability is addressed through monitoring measures and the resulting rapid response to incidents. • Geographically dispersed operations centers are in operation around the clock. • Intelligent back-up failover capabilities cater for availability. • Data is permanently held in two locations. Back-up site locations can be selected. This allows that flawless replicas can be created.
Availability and Resilience. Capacity to be restored The Contractor shall warrant the ability to rapidly restore the availability of and access to personal data in the event of a physical or technical incident by taking the following measures: ● regular execution of backups ● performance of a regular check of the condition and identification of data carriers for data backups ● separate storage of the backup data media/back-up stocks ● regular, prompt updating of servers and workstations (patch management)
Availability and Resilience. 4.1. High Availability Architecture - Load balanced, high-performance, redundant and monitored 24/7.
Availability and Resilience. 6.1 The Booking Service must be sufficiently robust and resilient to meet the required hours of operation, with no single points of failure and designed to minimise data loss in line with Schedule 21.
Availability and Resilience. Availability Control SoftwareONE shall ensure that personal data is protected against destruction or loss. Technical Measures • Fire and smoke detection systems • Fire extinguisher server room • Server room monitoring temperature and humidity, server room airconditioned • Uninterrupted power supply (UPS) • Centralized managed malware protection solutions are in place within our environments. Related information systems are protected by traffic control. This implies the usage of firewall technologies and network segmentation. A Client Management Suite is installed on all devices and can only be disabled/modified by administrators Organizational Measures • Backup & Recovery Concept: SoftwareONE has a documented backup concept. The backup recovery functionality is tested regularly. At the request of the Controller, SoftwareONE can provide the backup concept. • Checking the backup process • Regular data recovery tests and logging of the result • Regular data backup, checked for recoverability • Existence of a contingency plan: SoftwareONE has multiple business contingency and risk management scenarios in place • When updates for systems or applications are announced, they are evaluated as quickly as possible and installed after release. The installation of security updates is prioritized. Security related updates are installed promptly and must be implemented within six weeks of release. This maximum period is intended to ensure that there is enough testing time even for critical systems • The storage systems meet the traditional demands of resilience and reliability
Availability and Resilience. Data on doo's server systems are regularly backed up comprehensively according to a detailed backup policy. The import of backups is tested regularly. The IT systems have an uninterruptible power supply. The server room is equipped with a fire alarm system and a CO2 extinguishing system. All server systems are subject to monitoring, which immediately triggers messages to an administrator in case of malfunctions. There is also an emergency plan at doo, which includes a restart plan. In addition, the measures implemented with regard to the servers at the technical service provider AWS are documented in detail here: xxxxx://xxx.xxxxxx.xxx/de/security/
Availability and Resilience. Data on the Contractor’s server systems is backed up incrementally at least daily and "fully" weekly. The backup media are encrypted. The import of backups is tested regularly. The IT systems have an uninterruptible power supply. A fire alarm system and a CO2 extinguishing system are located in the server room. All server systems are subject to monitoring, which immediately triggers reports to an administrator in case of malfunctions. The Contrator implemented and maintains a detailed emergency plan, which also includes a business continuity and restart plan.
Availability and Resilience. It must be ensured that personal data is protected against accidental destruction or loss. ● Controller data is subject to regular data backups ● Use of redundant systems ● Use of uninterruptible power supply.
Availability and Resilience. The processing of personal data must occur on data processing systems that undergo regular, documented patch management. No systems may be connected in the network that are outside the maintenance cycles of the manufacturers (esp. no Windows XP, Windows Server 2003, etc.). Security- related patches must be installed within 72 hours after being announced. The continuous availability of personal data must be ensured by means of redundant storage media and data backups in accordance with the state of the art. Data centers and server rooms must correspond to the state of the art (temperature regulation, protection against fire, water penetration, etc.). The servers must have an uninterruptible power supply (UPS) that ensures a controlled shutdown without data loss. The company has implemented the requirements in the following manner: Regular documented patch management for the server Installation of security-critical patches within 72 hours Data storage on storage systems Spatially separated redundant data storage Uninterruptable power source Redundant air conditioning of the servers Early fire detection
